Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-09_ff4735cdb488d3cb6135eb4744c6b335_cryptolocker

  • Size

    49KB

  • Sample

    240409-s7xe7aeg2x

  • MD5

    ff4735cdb488d3cb6135eb4744c6b335

  • SHA1

    41f7b29c71506865193a802979a67d02ce0cc510

  • SHA256

    bdd00581bebb6599cf3c445b9b8eeadd793a17f3fe3189437f2f3e75874f9b80

  • SHA512

    0161f2770f4cb2b394c37f72e52a582174751ccb026ae4c111ad179631938f69dfd12276b4fe2cafb698e44c8ae437718df7b6639639def0ea02bcde118b2d6f

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8l/:vj+jsMQMOtEvwDpj5Hczer5ixuMC/

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_ff4735cdb488d3cb6135eb4744c6b335_cryptolocker

    • Size

      49KB

    • MD5

      ff4735cdb488d3cb6135eb4744c6b335

    • SHA1

      41f7b29c71506865193a802979a67d02ce0cc510

    • SHA256

      bdd00581bebb6599cf3c445b9b8eeadd793a17f3fe3189437f2f3e75874f9b80

    • SHA512

      0161f2770f4cb2b394c37f72e52a582174751ccb026ae4c111ad179631938f69dfd12276b4fe2cafb698e44c8ae437718df7b6639639def0ea02bcde118b2d6f

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8l/:vj+jsMQMOtEvwDpj5Hczer5ixuMC/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks